1. Introduction

QuickCards ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered flashcard platform. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We collect several types of information to provide and improve our Service:

2.1 Account Information

Email address
Display name and username (optional)
Profile picture, bio, and public profile visibility preferences (optional)
Authentication credentials, including Google OAuth identifiers if you sign in with Google

2.2 User Content

Flashcards and decks you create (including cloze deletions, image occlusion masks, and AI-generated mnemonics)
Notes, PDFs, and images you upload for AI processing or OCR (including handwriting)
Folders, subjects, tags, and organizational data
Study progress, quiz attempts, spaced repetition reviews, game sessions, and cram session data
AI Tutor conversations and deck chat messages
Likes, ratings, saves, and comments on public community decks

2.3 Usage Data

Study session duration, frequency, streaks, and streak-freeze usage
Feature usage patterns and AI generation, AI Tutor, and image-generation counts (used to enforce plan limits on Free, Basic, Pro, Pro Max, lifetime, and Teacher tiers)
Game scores and leaderboard entries
Device and browser information, including an anonymous device identifier used to rate-limit our free tools for signed-out visitors
IP address and approximate location (country, region, city) — derived from your IP via third-party geolocation providers; never from precise device GPS
Error and diagnostic logs we use to debug and improve the Service

2.4 Billing Data

Subscription tier (Free, Basic, Pro, Pro Max, Pro Lifetime, Pro Max Lifetime, Teacher) and billing status
Payment metadata returned by our payment processor (we never store full card numbers)
Referral codes you create or redeem, and rewards earned through the referral program

2.5 Communications and Notifications

Email preferences for product updates, study reminders, and spaced-repetition digests
Web push notification subscriptions (endpoint and keys) if you opt in to study reminders
Messages you send through our Contact form, feedback widget, or support channels

2.6 Teacher Mode Data

Classes you create or join, including class names, 6-character join codes, and member rosters
Assignments, due dates, and student completion/progress data
Teacher-tier subscription status (separate from individual plans)

3. How We Use Your Information

We use the collected information for the following purposes:

Provide, operate, and maintain our Service
Generate AI-powered flashcards and study materials
Track your study progress and maintain streaks
Process transactions and manage subscriptions
Send technical notices, updates, and support messages
Respond to your comments, questions, and requests
Analyze usage patterns to improve our Service
Detect, prevent, and address technical issues
Comply with legal obligations

4. AI Processing and Your Data

When you use our AI-powered features — flashcard generation, deck summaries, deck chat, AI Tutor explanations, quiz generation, image occlusion, automatic mnemonics, image generation, and short-answer grading:

Your input text, images, or audio is processed by AI systems via our AI gateway to generate content
We do not sell your content and do not authorize providers to train foundation models on your private content
AI-processed content is stored in your account for your use; AI Tutor conversations and deck chat history are stored so you can revisit them
You maintain ownership of all generated content
AI providers process content under their own terms and confidentiality obligations
We log aggregated AI usage (token counts, model, feature, and approximate cost) for billing, abuse prevention, and plan enforcement

4a. Free Tools and Anonymous Use

Our free public tools (text-to-flashcards, PDF/image/URL/YouTube/topic generators) can be used without an account. For these, we generate an anonymous device identifier stored in your browser to enforce per-device rate limits and detect abuse. No account or personal profile is created until you sign up.

5. Data Storage and Security

We implement robust security measures to protect your data:

Data encryption in transit (TLS/SSL) and at rest
Secure cloud infrastructure with regular security audits
Access controls and authentication requirements
Regular backups and disaster recovery procedures
Employee training on data protection practices

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in these circumstances:

Service Providers: With trusted third parties who help us operate the platform — hosting and database infrastructure, payment processing, transactional and reminder email delivery, web push delivery, AI model providers, image-search/Wikimedia lookups, and analytics
Public Content: Decks you mark as public, along with your display name/username and aggregate engagement stats, are visible to other users and may appear in search engines and our community/sitemaps
Public Profiles: If you opt in to a public profile, the fields you choose to expose are visible to other users and indexable
Teacher Mode: When you join a class, the class teacher can see your display name, assignment submissions, and progress within that class
Referral Program: Your referral code and aggregate referral activity may be visible to people you share it with
Legal Requirements: When required by law, subpoena, or to protect our rights, users, or the public
Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party providers are bound by confidentiality agreements and may only use your data for specified purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your session and authentication status
Remember your preferences (theme, settings)
Analyze usage patterns and improve our Service
Provide personalized features

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Service.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. After account deletion, we may retain certain data for legitimate business purposes (e.g., legal compliance, dispute resolution) for up to 90 days. Backup data may persist for an additional period before being permanently deleted.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Portability: Receive your data in a portable format
Objection: Object to certain processing activities
Restriction: Request limited processing of your data

To exercise these rights, contact us through our Contact page or use the options in your account settings.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

11. Children's Privacy

Our Service is not directed to children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal information from such children outside of a school or parent/guardian context. Teacher Mode classes operated by an educator are intended to be used in compliance with the educator's or school's own consent procedures (including FERPA/COPPA where applicable). If you believe a child has provided us personal information without proper consent, please contact us and we will delete it.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and/or by posting a prominent notice on our Service. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through our Contact page.